Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/HYrIsY9XqEqCTWu_rdBQTEcRz00.roa
File: HYrIsY9XqEqCTWu_rdBQTEcRz00.roa (raw, json)
Hash identifier: Vt3fWZ26FmMU/gZYoZNi9FFmLThy/GXP1s+FcMMebek=
Subject key identifier: 1D:8A:C8:B1:8F:57:A8:4A:82:4D:6B:BF:AD:D0:50:4C:47:11:CF:4D
Certificate issuer: /CN=2a8c588951260a11a3efbd6d816bd56f82f2fc34
Certificate serial: 020D9B
Authority key identifier: 2A:8C:58:89:51:26:0A:11:A3:EF:BD:6D:81:6B:D5:6F:82:F2:FC:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/HYrIsY9XqEqCTWu_rdBQTEcRz00.roa
Signing time: Fri 18 Feb 2022 14:14:34 +0000
ROA not before: Fri 18 Feb 2022 14:14:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199328
IP address blocks: 185.20.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134555 (0x20d9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a8c588951260a11a3efbd6d816bd56f82f2fc34
Validity
Not Before: Feb 18 14:14:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d8ac8b18f57a84a824d6bbfadd0504c4711cf4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7a:8f:03:36:63:50:8a:2d:08:5c:2d:53:dd:
28:bf:20:88:51:93:ef:c2:17:b9:6e:ac:f9:ef:8e:
de:da:2b:dc:92:47:a2:0f:f6:57:b7:5a:de:1f:5b:
9b:c8:bc:e2:e3:ba:d4:4e:84:4c:43:cf:51:67:e5:
91:ca:1b:54:ce:1e:f7:b7:7f:dd:57:ef:a6:7c:3c:
cf:77:2d:b6:d1:db:92:04:c8:8e:b2:b2:05:86:34:
3c:8b:60:b0:8f:a4:0b:d4:81:70:7f:69:a2:80:58:
80:6f:c6:1f:57:1f:a2:6d:b5:97:5d:74:7e:2c:83:
28:11:5b:5a:7d:99:7e:5f:46:51:e3:29:cf:b9:d1:
98:3c:cf:5a:2a:f1:5a:d8:a6:4f:f6:66:d7:f9:80:
e6:77:d3:80:d8:03:4a:45:98:e5:6f:c6:55:08:43:
2e:8d:27:ce:9d:f1:93:aa:0e:51:48:d3:13:48:06:
d2:e1:85:11:ff:83:d2:ed:c0:06:35:59:62:ed:f2:
f5:1f:04:d6:2d:cb:e4:d1:90:b9:a4:cf:98:62:f6:
8a:10:9b:ea:aa:55:d4:cf:da:31:21:b2:f2:1a:cc:
2c:6d:ad:62:ab:42:d8:6e:dd:2c:51:d1:a4:4f:2c:
4d:67:fe:f2:63:62:61:cc:76:d7:6f:ce:a1:cd:d8:
e4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8A:C8:B1:8F:57:A8:4A:82:4D:6B:BF:AD:D0:50:4C:47:11:CF:4D
X509v3 Authority Key Identifier:
keyid:2A:8C:58:89:51:26:0A:11:A3:EF:BD:6D:81:6B:D5:6F:82:F2:FC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/HYrIsY9XqEqCTWu_rdBQTEcRz00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.100.0/24
Signature Algorithm: sha256WithRSAEncryption
55:d9:98:4f:f7:2f:d2:d3:b3:95:22:ad:45:f1:af:92:f3:6a:
96:ae:30:fc:46:ea:7e:c7:58:65:f0:22:b9:9b:f4:61:70:62:
6e:af:c5:a1:94:5a:dc:64:93:a0:64:c9:10:07:89:b4:f7:3a:
6d:33:a4:44:64:85:52:15:97:30:9b:91:b6:93:2a:d2:a0:8e:
65:de:fc:18:2d:c6:cb:44:72:ff:a6:1b:30:d0:f0:09:d5:ed:
57:5b:7f:69:6e:d6:a9:f0:8b:c8:fb:19:a9:81:e4:3f:58:51:
75:7f:2f:7a:d3:7a:66:72:27:1a:43:c9:17:1f:e4:60:16:5d:
c2:7c:4c:0f:ba:9b:85:54:0b:7b:68:31:93:cd:86:b0:b0:dd:
14:2e:87:27:0e:0e:0f:bb:3c:30:31:a8:53:fa:12:9f:6e:89:
ed:f3:95:a4:72:13:c3:21:37:08:d1:27:cc:a7:35:76:92:b8:
b5:95:16:23:0a:af:49:26:f7:13:c9:2a:fe:20:22:3c:62:9a:
40:ea:a9:30:20:bf:3c:0a:17:24:6f:92:7c:c9:bc:f7:61:3f:
c1:66:52:1e:60:cc:c2:5c:63:4a:20:de:3d:ac:d5:72:9e:d4:
80:0a:75:28:f5:75:0f:0c:ab:ba:ec:7a:5b:47:c1:22:6a:dd:
04:7f:51:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:13 2024 by rpki-client on console-fra.rpki-client.org